Welcome to the mailbox.org user forum!
 

Sudden obvious SPAM daily being received

Mark shared this problem 2 years ago
Published

Over the last week I have suddenly started to experience daily spam that is more than obviously not real email. The sender email address is always different and I am always being offered sexual services linking to dubious sites.

Why is this getting through and why do you not have a way to notify you of this issue?

What can you do to stop this? I'm nearly at the end of my credit and won't re-subscribe if this is something you can't resolve.

Thanks

Comments (8)

photo
1

On twitter you asked for a ticket number but there appears to be no ticket number issue raising system apart from this forum, which you clearly ignore by looking at other posts.

I should add that I have read your rather arrogant sounding FAQ but the issue is not related to forwarded emails, these are being sent direct to me and my account as I use a personal domain. I never give out the particular alias so that isn't the problem.

It is most definitely obvious SPAM that you should be filtering and has only suddenly started happening.

photo
1

Please contact our support for this issue.

support@mailbox.org

photo
1

Are you kidding me @Mark and mailbox support? I now have this issue and all you can say is "don't be arrogant"? Consider future people in need of help plase. Indeed - how is there not "this is spam" button anywhere?

photo
1

Anti-spam measures are described in great detail here: https://userforum-en.mailbox.org/knowledge-base/article/customizing-your-mailbox-org-spam-filter-settings

As a former email server administrator, I will note that the combination of greylisting and Spam Assassin solved about 98% of my users' spam issues -- it basically shut off spam instantly, like turning off a light switch.

Unfortunately, blocking spam isn't really as simple as having a checkbox labeled "Block Spam" and having it tied to a magical back-end process. People who distribute spam have a very real monetary interest in getting their message in front of your eyeballs... so they are willing to spend time and effort to make that happen. The less "spam-looking" they can make their message, the more likely it is to be mistaken for a legitimate email by the scanning mechanisms. Some things are easy for a human to identify right away, but are difficult to analyze in an automated fashion -- especially in a world where we expect to receive email more or less instantly (greylisting actually adds a bit of a delay that some of my users found frustrating, even if it was only a few minutes).

The admins have some material posted on why they don't think that marking things as spam is a successful idea. You can find the material here, though it is in German (maybe someone can translate?): https://www.heinlein-support.de/vortrag/spam-quarantaene-und-tagging-der-grosse-irrtum

Spam is annoying and frustrating, but make sure your anger isn't misplaced. I think the latest research estimates that about 60% of total email sent every day is spam, so email admins have to do they best they can while at the same time ensuring that the infrastructure is working properly and taking care of arguably more significant email delivery issues that users may have. Do your part to ensure good email hygiene -- don't post your address publicly, use a separate address or alias to register for websites than the one you use to communicate directly with people, use disposable addresses for "throwaway" places that ask for email but you don't want to maintain a relationship with. It's an ongoing effort and occasionally the bad stuff gets through. Blame the spammers, though, and not the email admins. Every email service everywhere has the same problem, it's not the fault of one particular provider.

photo
1

One other thought, sorry for the long/continuing rant. :)

You can set up an external mail application to use your mailbox.org account. Some mail applications have their own built-in antispam features, so even though the server-side filtering may let something through, you could still use the email program to flag items as spam separately.

Obviously this is dependent on always using that same email program instead of the webmail interface, but it is an option that provides another layer of protection that is available to you. I'll recommend the Thunderbird email program (https://www.thunderbird.net/en-US/), but I'm sure there are others that work similarly.

You could also consider adding your mailbox.org account to another online provider (such as Gmail) that offers more interactive spam filtering, but you'd have to review that provider's details to see whether their filtering would apply to external accounts via IMAP or POP3.

photo
1

Thanks for the long rant, you clearly care about the issue.

As I said, I have just made my domain public and already getting spam - haven't even posted it anywhere. I'm sure this is just because some bots spam all known domains everywhere.

Now to the point. A "this is spam" button is not magic. I would expect it just to feed some more info to the spam filters and block this sender from my inbox. Simple as that. I don't expect magic. Right now I have to go blacklist the email by hand and it's a major discomfort.

Also. Let's be honest here. The button makes me feel like something has been done. peace of mind. I want it.

photo
1

I get it, and my apologies if I came off as accusatory or otherwise confrontational. It was certainly not my intent. :)

That said, and this is probably redundant, but have you double-checked the spam filter settings for your account? https://office.mailbox.org/appsuite/#!!&app=io.ox/settings&folder=virtual/settings/org.mailbox/verwaltung ("Settings Spamprotection")

What I will say, too, is that any time I register a new domain I am absolutely bombarded with email from advertising and SEO services offering me all sorts of wonderful deals for everything from logo design, social media integration, and anything else that I wouldn't possibly need. Maybe you're just a victim of these services that just poll newly-registered domains and start blasting?

I understand about wanting control and wanting to feel like you're doing something to make it better. Getting all sorts of junk and just hitting Delete or Block Sender feels very reactive, like you're at the mercy of the spammers. This service seems to sit on an Open-Xchange framework, maybe there are some custom scripts/macros/plugins out there that can automate the "Blacklist sender and move message to trash" function?

photo
1

yeah those settings are pretty strict by default.

I get the "new domain, let's send spam" bots. But for some reason I got a spam email from @domain.com that I've never had anything to do with. Confusing.